85.254.85.202

Webpage crawler

Fail2Ban: 85.254.85.202 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36

Fail2Ban: 85.254.85.202 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36

Malicious activity detected

L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /18-velo-route | query: q=Stock+magasin-Cycling+H%C3%A9nin%5C-Beaumont-C ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /18-velo-route | query: q=Stock+magasin-Cycling+H%C3%A9nin%5C-Beaumont-Cycling+Montpellier/Mat%C3%A9riau-Aluminium/Taille-XXS-S-XL-55-57-53&resultsPerPa show less

85.254.85.202 | Port: 11008 | DNS: 85.254.85.202 2025-12-10T05:27:01+08:00 America/Chicago | FETCH Sproofing Activity Detetced. | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3 HTTP/ ... show more 85.254.85.202 | Port: 11008 | DNS: 85.254.85.202 2025-12-10T05:27:01+08:00 America/Chicago | FETCH Sproofing Activity Detetced. | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3 HTTP/1.1 443 GET | URL: /?8e9cffecb9abd9f=343&1764979293 | Ref: - | Country: US/United States/-08:00 IP City: Chicago 9ab794635fe910be-ORD/Chicago, IL, United States 1 hits/0 secs Robots 2 show less

(mod_security) mod_security (id:225170) triggered by 85.254.85.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 14 23:05:47.185511 2024] [security2:error] [pid 12368] [client 85.254.85.202:40824] [client 85. ... show more (mod_security) mod_security (id:225170) triggered by 85.254.85.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 14 23:05:47.185511 2024] [security2:error] [pid 12368] [client 85.254.85.202:40824] [client 85.254.85.202] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vangentholding.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/198158"] [unique_id "ZpSSC6F2dX_cab7_fyNuxgAAAAs"] show less